Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
File:                     2725235d-11ba-361f-b603-889fb3fed103.roa (raw, json)
Hash identifier:          Y4z/t1DUBKCauaobTpgpf1DH2B49EYwqsJ0C8Mi+Bfo=
Subject key identifier:   8E:AB:74:E9:91:33:6A:4D:37:1B:14:DE:10:38:CD:1F:8F:30:6A:DB
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584AFEE6A54047A9B3F03BE7B1C0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        206.53.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a5:40:47:a9:b3:f0:3b:e7:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=34922055-8aaa-4695-b777-69fdcc80720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:f2:ce:7e:9a:a0:d9:b5:d3:19:d0:01:de:
                    3f:1e:86:e3:60:90:7e:ee:3c:d1:28:32:8f:b9:19:
                    36:d3:f2:40:a0:91:62:32:7f:3f:6f:cb:90:3e:d2:
                    7e:1c:51:6c:39:48:93:f6:83:1c:0c:91:ce:9a:ad:
                    d2:bb:1e:62:08:0f:47:f9:5b:90:f7:35:0a:a1:74:
                    2e:01:8d:be:3a:c9:4b:fd:c1:ad:12:fe:db:89:c2:
                    52:b8:aa:b8:22:a7:fd:ec:69:a4:f0:df:22:5d:ea:
                    e4:2a:4c:93:bc:12:c3:a4:65:a4:b0:f9:b3:04:a9:
                    b0:21:10:cb:80:f8:df:24:9c:79:ad:e4:b9:f4:bf:
                    be:ea:ee:3a:48:fd:4c:1f:35:57:70:9f:86:74:92:
                    cd:61:3c:63:12:64:90:c6:d8:88:0f:6b:6c:58:e0:
                    78:1c:e0:b0:71:37:6f:ad:9a:89:90:fc:6f:e2:78:
                    7c:29:6f:3b:d0:b9:f2:97:75:cc:59:eb:99:10:83:
                    1f:e3:d8:ff:9b:e4:2a:d8:33:a3:ed:e9:bb:6c:44:
                    2b:5f:3b:9e:7e:cd:df:74:61:e2:50:e0:1a:b0:53:
                    bc:fb:72:47:ae:99:5a:46:29:10:95:24:71:61:4c:
                    23:3c:8c:a3:13:21:38:00:85:4e:32:0e:a7:56:f4:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AB:74:E9:91:33:6A:4D:37:1B:14:DE:10:38:CD:1F:8F:30:6A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/2725235d-11ba-361f-b603-889fb3fed103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:d4:e5:7f:c7:73:aa:7b:f6:0a:5f:5c:c9:0d:d2:36:73:
         5e:fa:18:75:8f:f5:4f:50:99:14:30:ea:45:5c:d8:51:a5:64:
         84:11:f1:6e:dd:df:7f:52:30:f6:9e:e7:74:53:97:e7:91:a8:
         d4:7a:7a:ec:55:28:cc:0e:8b:cc:af:c6:4a:14:ff:9e:a5:6c:
         ea:99:54:54:89:7d:2a:34:1a:80:33:09:db:31:c7:b9:b6:3f:
         68:e8:8a:65:35:5e:00:73:02:aa:28:a3:b1:56:a1:ff:32:33:
         b9:20:99:32:d7:9f:91:15:3a:b5:57:35:e1:66:31:7d:46:28:
         74:61:4a:68:03:3e:c1:e0:5a:fe:70:89:89:3b:ba:bf:86:6f:
         16:90:d5:87:67:96:9d:be:19:4f:dd:de:fa:d6:d2:e1:37:41:
         dd:25:48:8c:a9:66:35:ab:ff:28:fc:6a:4d:44:66:a0:83:c1:
         4a:b4:fb:c1:72:a6:a8:ca:c3:07:9c:8f:7c:b2:2c:d1:95:85:
         3d:ae:b0:c7:cb:ba:23:e3:54:c2:b6:aa:fc:39:27:d8:00:93:
         0b:fd:74:2c:ab:ec:bf:51:77:c1:3f:df:30:2a:d9:41:ee:fe:
         5a:67:fb:8a:17:2a:a3:f2:6f:35:18:2b:06:d9:aa:66:bd:2a:
         7a:46:d5:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qVAR6mz8DvnscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2
ZmE3MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
MzQ5MjIwNTUtOGFhYS00Njk1LWI3NzctNjlmZGNjODA3MjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Pyzn6aoNm10xnQAd4/HobjYJB+7jzRKDKP
uRk20/JAoJFiMn8/b8uQPtJ+HFFsOUiT9oMcDJHOmq3Sux5iCA9H+VuQ9zUKoXQu
AY2+OslL/cGtEv7bicJSuKq4Iqf97Gmk8N8iXerkKkyTvBLDpGWksPmzBKmwIRDL
gPjfJJx5reS59L++6u46SP1MHzVXcJ+GdJLNYTxjEmSQxtiID2tsWOB4HOCwcTdv
rZqJkPxv4nh8KW870Lnyl3XMWeuZEIMf49j/m+Qq2DOj7em7bEQrXzuefs3fdGHi
UOAasFO8+3JHrplaRikQlSRxYUwjPIyjEyE4AIVOMg6nVvQ6wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6rdOmRM2pNNxsU3hA4zR+PMGrbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1
MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMjcyNTIzNWQtMTFiYS0z
NjFmLWI2MDMtODg5ZmIzZmVkMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj
NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz
NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1
ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjWJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALN71OV/x3Oqe/YKX1zJDdI2c176GHWP9U9QmRQw6kVc2FGlZIQR8W7d
339SMPae53RTl+eRqNR6euxVKMwOi8yvxkoU/56lbOqZVFSJfSo0GoAzCdsxx7m2
P2joimU1XgBzAqooo7FWof8yM7kgmTLXn5EVOrVXNeFmMX1GKHRhSmgDPsHgWv5w
iYk7ur+GbxaQ1Ydnlp2+GU/d3vrW0uE3Qd0lSIypZjWr/yj8ak1EZqCDwUq0+8Fy
pqjKwwecj3yyLNGVhT2usMfLuiPjVMK2qvw5J9gAkwv9dCyr7L9Rd8E/3zAq2UHu
/lpn+4oXKqPybzUYKwbZqma9KnpG1Xg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:47 2025 by rpki-client